blax-software
/
laravel-websockets
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

wip

This commit is contained in:
Marcel Pociot 2018-11-22 18:13:43 +01:00
parent efb603ea95
commit 07046c1fdd
1 changed files with 21 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
src/LaravelEcho/Http/Controllers/EventController.php
View File

@ -3,6 +3,7 @@
namespace BeyondCode\LaravelWebSockets\LaravelEcho\Http\Controllers; namespace BeyondCode\LaravelWebSockets\LaravelEcho\Http\Controllers;
use BeyondCode\LaravelWebSockets\LaravelEcho\Pusher\Channels\ChannelManager; use BeyondCode\LaravelWebSockets\LaravelEcho\Pusher\Channels\ChannelManager;
use BeyondCode\LaravelWebSockets\LaravelEcho\Pusher\Exceptions\InvalidSignatureException;
use Illuminate\Http\Request; use Illuminate\Http\Request;
class EventController extends EchoController class EventController extends EchoController
@ -17,17 +18,8 @@ class EventController extends EchoController
public function __invoke(Request $request) public function __invoke(Request $request)
{ {
//TODO: verify the incoming request $this->verifySignature($request);
/*
* array:6 [
"appId" => "test"
"auth_key" => ""
"auth_signature" => "51e7ab9c1411aacf9a4c28001ffc3e7f5fe71db130ce08ac071ab49d737bcf52"
"auth_timestamp" => "1542833998"
"auth_version" => "1.0"
"body_md5" => "816e28da10f4aedf0821865eddf55e7f"
]
*/
foreach ($request->json()->get('channels', []) as $channelId) { foreach ($request->json()->get('channels', []) as $channelId) {
$channel = $this->channelManager->find($request->appId, $channelId); $channel = $this->channelManager->find($request->appId, $channelId);
@ -40,4 +32,22 @@ class EventController extends EchoController
return $request->json()->all(); return $request->json()->all();
} }
protected function verifySignature(Request $request)
{
$bodyMd5 = md5($request->getContent());
$signature =
"POST\n/apps/{$request->get('appId')}/events\n".
"auth_key={$request->get('auth_key')}".
"&auth_timestamp={$request->get('auth_timestamp')}".
"&auth_version={$request->get('auth_version')}".
"&body_md5={$bodyMd5}";
$authSignature = hash_hmac('sha256', $signature, config('broadcasting.connections.pusher.secret'));
if ($authSignature !== $request->get('auth_signature')) {
throw new InvalidSignatureException();
}
}
} }